This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/8ABC3240DDFB03E0CCAA63975F272973E713952B.mft File: 8ABC3240DDFB03E0CCAA63975F272973E713952B.mft (raw, json) Hash identifier: UyvFA0qpzEdRjwc5+Gw33AH+y24nXBg0P8/Yy40CFgk= Subject key identifier: 49:1F:B8:F5:5E:65:E8:F1:84:22:A7:8D:76:51:42:9E:A3:28:18:B4 Authority key identifier: 8A:BC:32:40:DD:FB:03:E0:CC:AA:63:97:5F:27:29:73:E7:13:95:2B Certificate issuer: /CN=8abc3240ddfb03e0ccaa63975f272973e713952b Certificate serial: 3E11C9844C00655DE2FACC80938EF18D45C8FE87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irwyQN37A-DMqmOXXycpc-cTlSs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/8ABC3240DDFB03E0CCAA63975F272973E713952B.mft Manifest number: 21 Signing time: Sat 24 Jan 2026 22:53:05 +0000 Manifest this update: Sat 24 Jan 2026 22:48:05 +0000 Manifest next update: Mon 26 Jan 2026 00:54:05 +0000 Files and hashes: 1: 8ABC3240DDFB03E0CCAA63975F272973E713952B.crl (hash: Ek/J+AuJ3RvQojegfAdGD7gAbq5FSdMh1nLZ60wBcfI=) 2: AS214223.asa (hash: VAiDcJONMDsZuM3F5piV/7wrbAMpvItM3Z9y7cQTNTA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/8ABC3240DDFB03E0CCAA63975F272973E713952B.crl rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/8ABC3240DDFB03E0CCAA63975F272973E713952B.mft rsync://rpki.ripe.net/repository/DEFAULT/irwyQN37A-DMqmOXXycpc-cTlSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 00:54:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:11:c9:84:4c:00:65:5d:e2:fa:cc:80:93:8e:f1:8d:45:c8:fe:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8abc3240ddfb03e0ccaa63975f272973e713952b Validity Not Before: Jan 24 22:48:05 2026 GMT Not After : Jan 26 00:54:05 2026 GMT Subject: CN=491FB8F55E65E8F18422A78D7651429EA32818B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:85:ec:f0:f2:a0:6a:07:e8:58:a6:10:b3:6c: 1e:fa:d3:8b:5b:86:49:51:b2:e4:27:38:8e:97:5f: 1a:49:84:91:00:13:9c:94:ce:81:25:8e:b8:5b:d2: 03:9e:cd:4d:95:a4:0f:bd:f3:8e:e6:5c:55:61:88: 7f:ec:e0:b0:6b:8b:44:10:59:9c:49:71:bf:bb:15: b4:05:d4:78:be:d8:d5:69:c1:a8:ce:ef:da:4e:af: 31:04:05:a7:b9:69:e3:a9:ec:01:fe:91:6c:f2:ef: 25:74:2e:44:7c:84:02:8e:20:ff:73:6c:3a:dd:6d: fd:a7:ff:e5:fb:ed:c2:1a:3b:19:42:72:8c:2f:88: aa:6f:b3:fc:b9:29:e5:a2:60:95:25:c1:fe:02:2f: d1:85:33:07:d0:73:58:77:dd:f0:1c:64:47:37:61: 7a:f7:a9:5c:fa:f5:0a:d6:ec:eb:8c:5d:03:ce:09: 89:62:8e:60:fd:0c:48:83:a9:63:29:4f:81:29:34: fd:b5:32:ff:5e:ae:2c:b8:4a:f2:e3:0b:9d:9f:3b: 11:4c:91:3a:40:a2:9e:bf:87:6a:88:c7:d5:75:d5: 5f:f7:12:e8:44:f4:d8:e9:10:d2:f2:37:98:08:08: ea:ea:08:dc:25:52:80:35:e7:77:bc:93:4e:78:c1: ec:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1F:B8:F5:5E:65:E8:F1:84:22:A7:8D:76:51:42:9E:A3:28:18:B4 X509v3 Authority Key Identifier: keyid:8A:BC:32:40:DD:FB:03:E0:CC:AA:63:97:5F:27:29:73:E7:13:95:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/8ABC3240DDFB03E0CCAA63975F272973E713952B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irwyQN37A-DMqmOXXycpc-cTlSs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/8ABC3240DDFB03E0CCAA63975F272973E713952B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:b3:2c:50:e4:c5:ec:1b:86:2a:1d:ed:11:52:17:a7:a4:c9: e8:54:e8:f8:e4:ed:c1:9f:07:6a:5d:5c:bb:56:09:cf:e8:3c: a8:ca:66:0a:41:ba:82:8c:41:93:3f:69:91:2d:43:25:4d:7d: 3d:4c:75:48:fd:42:04:95:cd:6b:20:08:88:55:39:d2:b5:ef: 5e:d0:fa:41:95:63:f0:1c:8e:14:b1:2f:fe:ed:3d:6b:c2:d8: a8:5d:e4:c0:1f:5d:d6:25:a8:98:10:b7:b9:21:99:1f:c7:26: fc:39:16:30:72:c1:3d:18:60:96:3a:ad:ec:4e:b8:1e:6d:5a: cb:bc:a2:0c:0b:20:25:19:c9:f8:14:fb:65:3f:f4:72:1f:e2: d3:b1:e7:a4:5e:6c:d1:f5:89:56:1f:f4:19:dd:5e:f0:05:34: 3a:6a:2c:b1:b1:5f:23:c4:fc:b0:6b:6b:e8:46:0e:ae:71:35: b4:53:f6:8d:37:d1:ab:ce:f1:85:fe:a0:9a:98:de:95:63:fd: a3:41:e4:a1:86:d7:32:e9:5d:e9:b0:93:4a:ec:bb:c0:31:d9: a6:c3:0f:bb:20:fb:02:85:2e:89:d7:d3:4b:23:da:e5:56:f3: e3:9e:fc:7e:df:f6:bc:47:ec:e1:e5:a8:4a:f1:72:0d:d5:16: 33:6f:cb:3d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPhHJhEwAZV3i+syAk47xjUXI/ocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGFiYzMyNDBkZGZiMDNlMGNjYWE2Mzk3NWYyNzI5NzNl NzEzOTUyYjAeFw0yNjAxMjQyMjQ4MDVaFw0yNjAxMjYwMDU0MDVaMDMxMTAvBgNV BAMTKDQ5MUZCOEY1NUU2NUU4RjE4NDIyQTc4RDc2NTE0MjlFQTMyODE4QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZhezw8qBqB+hYphCzbB7604tb hklRsuQnOI6XXxpJhJEAE5yUzoEljrhb0gOezU2VpA+9847mXFVhiH/s4LBri0QQ WZxJcb+7FbQF1Hi+2NVpwajO79pOrzEEBae5aeOp7AH+kWzy7yV0LkR8hAKOIP9z bDrdbf2n/+X77cIaOxlCcowviKpvs/y5KeWiYJUlwf4CL9GFMwfQc1h33fAcZEc3 YXr3qVz69QrW7OuMXQPOCYlijmD9DEiDqWMpT4EpNP21Mv9eriy4SvLjC52fOxFM kTpAop6/h2qIx9V11V/3EuhE9NjpENLyN5gICOrqCNwlUoA153e8k054wewXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUSR+49V5l6PGEIqeNdlFCnqMoGLQwHwYDVR0j BBgwFoAUirwyQN37A+DMqmOXXycpc+cTlSswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmVkNGI3ZWItMTdhNy00NGUxLTljYTItMDk4YTMyMzgz YzkwLzAvOEFCQzMyNDBEREZCMDNFMENDQUE2Mzk3NUYyNzI5NzNFNzEzOTUyQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lyd3lRTjM3QS1ETXFtT1hYeWNwYy1j VGxTcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yZWQ0YjdlYi0x N2E3LTQ0ZTEtOWNhMi0wOThhMzIzODNjOTAvMC84QUJDMzI0MERERkIwM0UwQ0NB QTYzOTc1RjI3Mjk3M0U3MTM5NTJCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAbMsUOTF7BuGKh3tEVIX p6TJ6FTo+OTtwZ8Hal1cu1YJz+g8qMpmCkG6goxBkz9pkS1DJU19PUx1SP1CBJXN ayAIiFU50rXvXtD6QZVj8ByOFLEv/u09a8LYqF3kwB9d1iWomBC3uSGZH8cm/DkW MHLBPRhgljqt7E64Hm1ay7yiDAsgJRnJ+BT7ZT/0ch/i07HnpF5s0fWJVh/0Gd1e 8AU0OmossbFfI8T8sGtr6EYOrnE1tFP2jTfRq87xhf6gmpjelWP9o0HkoYbXMuld 6bCTSuy7wDHZpsMPuyD7AoUuidfTSyPa5Vbz4578ft/2vEfs4eWoSvFyDdUWM2/L PQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:00 2026 by rpki-client